2000

The Citrix ICA (Independent Computing Architecture) protocol uses weak encryption (XOR) for user authentication.

Vulnerability in SGI IRIX objectserver daemon allows remote attackers to create user accounts.

Buffer overflow in the huh program in the orville-write package allows local users to gain root privileges.

gpm-root in the gpm package does not properly drop privileges, which allows local users to gain privileges by starting a

Unknown vulnerability in Generic-NQS (GNQS) allows local users to gain root privileges.

Linux kreatecd trusts a user-supplied path that is used to find the cdrecord program, allowing local users to gain root

SuSE Linux IMAP server allows remote attackers to bypass IMAP authentication and gain privileges.

Batch files in the Oracle web listener ows-bin directory allow remote attackers to execute commands via a malformed URL

When a new SQL Server is registered in Enterprise Manager for Microsoft SQL Server 7.0 and the "Always prompt for login

Buffer overflow in imwheel allows local users to gain root privileges via the imwheel-solo script and a long HOME enviro

atsadc in the atsar package for Linux does not properly check the permissions of an output file, which allows local user

Buffer overflow in the wmcdplay CD player program for the WindowMaker desktop allows local users to gain root privileges

Buffer overflow in StarOffice StarScheduler web server allows remote attackers to gain root access via a long GET comman

Microsoft SQL Server 7.0 and Microsoft Data Engine (MSDE) 1.0 allow remote attackers to gain privileges via a malformed

The mtr program only uses a seteuid call when attempting to drop privileges, which could allow local users to gain root

DNSTools CGI applications allow remote attackers to execute arbitrary commands via shell metacharacters.

Buffer overflow in TT_SESSION environment variable in ToolTalk shared library allows local users to gain root privileges

The default configuration of Dosemu in Corel Linux 1.0 allows local users to execute the system.com program and gain pri

SGI InfoSearch CGI program infosrch.cgi allows remote attackers to execute commands via shell metacharacters.

Axis StorPoint CD allows remote attackers to access administrator URLs without authentication via a .. (dot dot) attack.

ServerIron switches by Foundry Networks have predictable TCP/IP sequence numbers, which allows remote attackers to spoof

Buffer overflow in mhshow in the Linux nmh package allows remote attackers to execute commands via malformed MIME header

Buffer overflow in the dump utility in the Linux ext2fs backup package allows local users to gain privileges via a long

Buffer overflow in Lynx 2.x allows remote attackers to crash Lynx and possibly execute commands via a long URL in a mali

EZShopper 3.0 loadpage.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execu

EZShopper 3.0 search.cgi CGI script allows remote attackers to read arbitrary files via a .. (dot dot) attack or execute

Buffer overflow in the man program in Linux allows local users to gain privileges via the MANPAGER environmental variabl

buildxconf in Corel Linux allows local users to modify or create arbitrary files via the -x or -f parameters.

setxconf in Corel Linux allows local users to gain root access via the -T parameter, which executes the user's .xserverr

Red Hat 6.0 allows local users to gain root access by booting single user and hitting ^C at the password prompt.

Buffer overflow in the InterAccess telnet server TelnetD allows remote attackers to execute commands via a long login na

The Microsoft Active Setup ActiveX component in Internet Explorer 4.x and 5.x allows a remote attacker to install softwa

The installation of Sun Internet Mail Server (SIMS) creates a world-readable file that allows local users to obtain pass

Sample web sites on Microsoft Site Server 3.0 Commerce Edition do not validate an identification number, which allows re

Windows NT Autorun executes the autorun.inf file on non-removable media, which allows local attackers to specify an alte

HP Ignite-UX does not save /etc/passwd when it creates an image of a trusted system, which can set the password field to

Buffer overflow in MMDF server allows remote attackers to gain privileges via a long MAIL FROM command to the SMTP daemo

procfs in BSD systems allows local users to gain root privileges by modifying the /proc/pid/mem interface via a modified

The installation for Windows 2000 does not activate the Administrator password until the system has rebooted, which allo

Check Point Firewall-1 allows remote attackers to bypass port access restrictions on an FTP server by forcing it to send

Infopop Ultimate Bulletin Board (UBB) allows remote attackers to execute commands via shell metacharacters in the topic

MySQL 3.22 allows remote attackers to bypass password authentication and access a database via a short check string.

Vulnerability in SCO cu program in UnixWare 7.x allows local users to gain privileges.

Axis 700 Network Scanner does not properly restrict access to administrator URLs, which allows users to bypass the passw

The libguile.so library file used by gnucash in Debian GNU/Linux is installed with world-writable permissions.

The Finger Server 0.82 allows remote attackers to execute commands via shell metacharacters.

wwwthreads does not properly cleanse numeric data or table names that are passed to SQL queries, which allows remote att

The Webspeed configuration program does not properly disable access to the WSMadmin utility, which allows remote attacke

Buffer overflow in Linux mount and umount allows local users to gain root privileges via a long relative pathname.

The default installation of Debian GNU/Linux uses an insecure Master Boot Record (MBR) which allows a local user to boot